Skip to main content

Subprocessors

Last updated: 2026-07-08

This is the authoritative list of third-party subprocessors engaged by Devotel UK LTD to deliver the Orbit communications platform. Each subprocessor is bound by a Data Processing Agreement or equivalent contractual terms, and is permitted to process customer data only as necessary to deliver the listed purpose.

Large-language-model inference for AI agents, classifiers, and Orby in-product assistant.

Data:contentmetadata·Vendor DPA
EU (europe-west1, Belgium) with cross-region replica in europe-west2 (London)

Production compute (GKE), managed Postgres (Cloud SQL), object storage (GCS), Secret Manager, Cloud Build, and observability.

Data:accountcontentmetadatatelemetry·Vendor DPA

User authentication, session management, multi-factor authentication, and organization membership.

Data:accountauth·Vendor DPA
US / EU (multi-region)

Payment processing, subscription billing, invoice generation, and tax computation. Cardholder data never traverses Orbit systems.

Data:billing·Vendor DPA
Telnyxinbound only
US / EU (multi-region)

Inbound SMS and voice termination on DIDs purchased from Telnyx. Outbound (MT) traffic does NOT flow through Telnyx.

Data:metadatacontent·Vendor DPA
DIDWWinbound only
EU (Latvia)

Inbound voice and SMS termination on DIDs purchased from DIDWW. Outbound (MT) traffic does NOT flow through DIDWW.

Data:metadatacontent·Vendor DPA

One-shot import path only — used at customer request to migrate phone numbers and historical message data into Orbit. No live traffic.

Data:metadata·Vendor DPA

Real-time speech-to-text transcription for voice agents and call recordings.

Data:content·Vendor DPA

Low-latency text-to-speech synthesis for voice agents.

Data:content

High-quality text-to-speech synthesis for voice agents (alternate provider).

Data:content·Vendor DPA
EU (europe-west1, GCP)

Self-hosted WebRTC media plane (SFU) for live voice agent sessions. Runs inside Devotel’s GCP infrastructure (europe-west1); no audio data leaves Devotel’s own cluster.

Data:contentmetadata·Vendor DPA
EU (Frankfurt)

Product analytics, session replay (opt-in), and feature-flag evaluation. PII-redaction enabled by default.

Data:telemetry·Vendor DPA

Application error and performance monitoring. PII scrubbed before transmission.

Data:telemetry·Vendor DPA

Outbound transactional and platform-managed marketing email delivery. Customers are billed at cost plus markup; no BYO SMTP.

Data:contentmetadata·Vendor DPA
EU (Frankfurt)

Vector database for retrieval-augmented generation (RAG) over agent knowledge bases. Chunk content encrypted at rest with AES-256-GCM (enc:v1 envelope).

Data:content·Vendor DPA

Get notified of subprocessor changes

When we add, replace, or remove a subprocessor, we update this page and send advance notice consistent with Section 6 of our Data Processing Agreement. Subscribe below to receive that notice by email.

Double opt-in: we email a confirmation link before sending any notices. Every notice carries a one-click unsubscribe.

Change history

An audit trail of additions, replacements, removals, and periodic reviews of the subprocessor list.

  1. reviewed

    Sub-processor register Completed a periodic re-verification of the full sub-processor register against our current provider inventory. No sub-processors were added, replaced, or removed — the list published below remains accurate.

  2. published

    Sub-processor register Published the authoritative public sub-processor register, with a Data Processing Agreement or equivalent terms in place for every listed processor.

Related

Subprocessors — Orbit by Devotel